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We investigate a decoy-state quantum key distribution (QKD) scheme with a sub-Poissonian single-photon 
source, which is generated on demand by scattering a coherent state off a two-level system in a one-dimensional 
waveguide. We show that, compared to coherent state decoy-state QKD, there is a two-fold increase of the key 
generation rate. Furthermore, the performance is shown to be robust against both parameter variations and 
loss effects of the system. © 2012 Optical Society of America 
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Quantum key distribution (QKD), which allows two dis- 
tant users, Alice and Bob, to share a secret key with 
security guaranteed by principles of quantum physics, is 
the first commercially available application of quantum 
information science. The first QKD protocol, BB84 [1], 
proposes to use an ideal single-photon source, which is 
still beyond the current technology despite tremendous 
experimental effort worldwide. Hence, most QKD ex- 
periments use weak coherent states (WCS) from atten- 
uated lasers as a photon source [2-8]. Two drawbacks 
come with the WCS: the multiphoton and the vacuum 
components. The vacuum content limits Bob's detection 
rate, and hence leads to a shorter maximal distance. The 
multiphoton component makes QKD vulnerable to the 
photon number splitting attack, where the eavesdropper 
(Eve) can suppress single-photon signals and split multi- 
photon signals, keeping one copy and sending one copy to 
Bob. This way, Eve obtains the full information without 
being detected, and the unconditional security breaks 
down. The decoy state method was proposed to beat 
such attacks [9]: Alice prepares additional decoy states, 
and learns about the eavesdropping from their transmis- 
sion. Recently, alternative light sources, including spon- 
taneous parametric down-conversion [10] and heralded 
single-photons [11], have been used in decoy-state QKD. 

In this paper, we combine the decoy-state method with 
a sub-Poissonian single-photon source generated on de- 
mand by scattering in a waveguide. We find that there 
is a substantial increase in the key generation rate and 
maximal transmission distance compared to both WCS 
and heralded single-photon decoy-state QKD. Further- 
more, the performance is robust against either parame- 
ter variation or loss in the system, making it a promising 
candidate for future QKD systems. 

Recently, strong coupling between light and matter 
has been achieved in a variety of one-dimensional (ID) 
waveguidc-QED systems [12-15]. This great experimen- 
tal progress has stimulated extensive theoretical study 
of nonlinear effects in such systems for the purpose of 
quantum information processing [16-21]. One applica- 



tion is to generate nonclassical light by sending a coher- 
ent state into a ID waveguide which is side-coupled to a 
quantum nonlinear element, such as a two- level system 
(2LS) [14,22]. The nonlinearity of the quantum element 
leads to a distinct difference between multiphoton and 
single-photon scattering. For example, when two pho- 
tons interact with a 2LS simultaneously, the 2LS will 
only be able to absorb one photon and hence the pair will 
have a high transmission probability. This is confirmed in 
Ref. 22, where we show that the photon number statis- 
tics of the transmitted field follow a super-Poissonian 
distribution. Here, we focus on the reflected field, which 
has sub-Poissonian statistics. 

Figure 1 shows the probabilities P n to measure n- 
photon states in the reflected field after scattering a 
coherent state off the 2LS. We will call such a photon 
source the "2LS source". The input coherent state has 
mean photon number n = 1. We take a Gaussian wave- 
packet with central frequency on resonance with the 
2LS and root-mean-square spectral width a. The excited 
state of the 2LS decays into the waveguide mode at rate 
r and into other modes at rate T'. For now, we set the 
loss rate T' = 0, returning to consider the effect of loss 
later. For comparison, we also show P n (dashed line) of a 
coherent state with the same mean photon number as the 
reflected field. It is remarkable that, for the full param- 
eter range, the reflected field has higher single-photon 
and lower vacuum and multiphoton content than the co- 
herent state. In the insert of Fig. 1, we show that the 
multiphoton content is strongly suppressed at T = 2a. 
This is in agreement with the antibunching behavior of 
microwave photons observed in a recent experiment [14], 
and is the key to increasing the key generation rate. 

Now, we discuss the decoy-state method with light 
sources, including weak coherent states, a heralded 
single-photon source (HSPS), and the 2LS source 
(2LSS). The secure key generation rate is given by [23] 

R > q{-Q s f(E s )H 2 (E s ) + Q 1 [1- H 2 ( ei )}}, (1) 

where the efficiency q is 1/2 for the Bennett-Brassard 
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1984 (BB84) protocol, f(E s ) is the error correction effi- 
ciency (we use / = 1.22 [24]), Q s and E s are the overall 
gain and error rate of signal states, respectively, Q\ and 
e\ are the gain and error rate of single-photon states, re- 
spectively, and H2 (x) is the binary Shannon information 
function: i?2(x) = — xlog 2 (x) — (1 — x)log 2 (l — x). 

In Eq. (1), while Q s and E s are measurable quantities 
in experiments, Q\ and e\ are unknown variables. Q s 
and E s are given by 
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where p s n is the n-photon probability of signal states, e n 
is the error rate of an n-photon state, and Y n is the n- 
photon yield, i.e., the conditional probability of a click on 
Bob's side given that Alice has sent an n-photon state. 

To generate a lower bound on the key generation rate, 
we have to estimate a lower bound of Q\ (or equivalently 
Yi as Q\ = pfYi) and an upper bound of e\. Estimat- 
ing the lower bound Yj and the upper bound e" based 
solely on Eq. (2) unavoidably underestimates the secure 
key generation rate due to the lack of enough information 
about the transmission channel. The decoy-state idea [9] 
is a clever way to obtain additional channel information 
by sending decoy states in addition to the signal states. 
The decoy states are used to detect eavesdropping, but 
not for key generation. By measuring the transmission 
of the decoy states, Alice and Bob have another set of 
constraints 
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where Qd and Ed are the measured overall gain and error 
rate of decoy states, respectively. Because Eve has no 
way to distinguish an n-photon decoy state from an n- 
photon signal state, the yield Y n and the error rate e n 
are the same for both the decoy and signal states. 

For our numerical simulation, we use the channel 
model in Rcf. 25 to calculate the experimental param- 
eters Q s , E s , Qd, and Ed- In this model, the yield 
is Y n = 1 — (1 — Yq)(1 — 7?)™, where Yq is the back- 
ground rate and r\ is the overall transmittancc given 
by rj = tABVBob, where <ab = 10~ Q ^ 10 is the chan- 
nel transmittance and rjBob is the detection efficiency 
on Bob's side. Here, a is the loss coefficient and I is 
the transmission distance. The error rate is given by 
e n = [e Y Q + e d (Y n - Y )]/Y n , where e d is the proba- 
bility that a photon hits the wrong detector and eo is 
the error rate of the background. We use the experimen- 
tal parameters in Rcf. 2: a = 0.21dB/km, = 3.3%, 
Y = 1.7 x lCT 6 , e = 0.5, and r/ Bo b = 0.045. 

We apply the linear programming method [26] to es- 
timate Y[ and e" from Eqs. (2) and (3). This method is 
applicable to light sources with general number statis- 
tics. We use two decoy states — the vacuum and a weak 
decoy state. For the weak coherent states, the key gen- 
eration rate is optimized in terms of the mean photon 




Fig. 1. Nonclassical light source. The number statistics 
P n of the 2LS source (2LSS, solid), and a coherent state 
(CS, dashed) of the same mean photon number as a func- 
tion of r/cr. Insert: P n at T/a = 2. Here, we set V = 0. 



number in both the signal and decoy states. For the her- 
alded single-photons, we use the number statistics from 
Ref. 11. For the 2LS source, the signal and decoy states 
are generated by scattering coherent states of n = 1 and 
n = 0.02, respectively. We choose a = T/2. 

Figure 2 shows the resulting key generation rate. With 
the same experimental parameters and estimation tech- 
nique, our scheme using the 2LS source obtains a two- 
fold increasing of key generation rate compared to the 
WCS method. The maximal transmission distance is in- 
creased as well. In addition, our scheme also outperforms 
the HSPS scheme. Such a performance enhancement is 
due to the reduced vacuum and multiphoton contents, 
as shown in Fig. 1. 

Next, we investigate the robustness of our scheme with 
respect to the variation of system parameter T/a. As 
shown in Fig. 3(a), the key generation rate gradually con- 
verges as r/cr increases. In particular, the insert shows 
that the maximal transmission distance (£ max ) has little 



10" 




60 80 100 

Distance [km] 



160 



Fig. 2. Key generation rate with different light sources: 
weak coherent state (WCS), heralded single-photon 
source (HSPS), and 2LS source (2LSS) with T/a = 2 
and r = 



2 
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Fig. 3. Key generation rate of 2LS sources with param- 
eter variation and loss: (a) T = 0.2a, 0.5cr, a, 2a. Insert: 
maximal transmission distance (Cax) as a function T / a. 
r'=0; (b) P = 1, 2, 5, 10. Insert: £ max as a function of P. 
We choose V = 2a. 

change for T/a > 1 . 

Figure 3(b) shows the effect of loss on the system 
performance. We fix T = 2a and choose different loss 
rates V of the 2LS. We define an effective Purccll factor 
P = r/r' to quantify the strength of loss: P — > means 
large loss and P — > oo means neglible loss. In Fig. 3(b), 
we observe that, as P increases, the key generation rate 
increases and converges. It is evident that, for P > 10, 
the performance is very reliable against loss as shown in 
the insert. Given that values of P as large as 30 have 
already been achieved in a recent experiment [27], our 
scheme can be practically useful for quantum key dis- 
tribution. 

This work was supported by US NSF Grant No. PHY- 
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lowship from the Fitzpatrick Institute for Photonics at 
Duke University. 
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